freeipa.git/install/share, branch my-master

Add IPA OTP schema and ACLs

2013-05-17T07:30:51+00:00

This commit adds schema support for two factor authentication via
OTP devices, including RADIUS or TOTP. This schema will be used
by future patches which will enable two factor authentication
directly.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Add ipaUserAuthType and ipaUserAuthTypeClass

2013-05-17T07:30:51+00:00

This schema addition will be useful for future commits. It allows us to
define permitted external authentication methods on both the user and
global config. The implementation is generic, but the immediate usage
is for otp support.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Fix syntax errors in schema files

2013-04-26T15:15:16+00:00

- add missing closing parenthesis in idnsRecord declaration
- remove extra dollar sign from ipaSudoRule declaration
- handle missing/extraneous X-ORIGIN lines in 10-selinuxusermap.update

This does not use the schema updater because the syntax needs to be
fixed in the files themselves, otherwise 389 1.3.2+ will fail
to start.
Older DS versions transparently fix the syntax errors.

The existing ldap-updater directive for ipaSudoRule is fixed
(ldap-updater runs after upgradeconfig).

https://fedorahosted.org/freeipa/ticket/3578

Fix syntax of the dc attributeType

2013-04-26T15:13:52+00:00

dc syntax is changed from Directory String to IA5 String to conform
to RFC 2247.

Part of the work for https://fedorahosted.org/freeipa/ticket/3578

Add userClass attribute for hosts

2013-04-26T14:20:17+00:00

This new freeform host attribute will allow provisioning systems
to add custom tags for host objects which can be later used for
in automember rules or for additional local interpretation.

Design page: http://www.freeipa.org/page/V3/Integration_with_a_provisioning_systems
Ticket: https://fedorahosted.org/freeipa/ticket/3583

Use A/AAAA records instead of CNAME records in ipa-ca.

2013-04-15T19:12:36+00:00

https://fedorahosted.org/freeipa/ticket/3547

Remove 'cn' attribute from idnsRecord and idnsZone objectClasses

2013-04-10T11:56:11+00:00

A commonName attribute has no meaning in DNS records.

https://fedorahosted.org/freeipa/ticket/3514

Change CNAME and DNAME attributes to single valued

2013-04-02T15:11:46+00:00

These DNS attributeTypes are of a singleton type, update LDAP schema
to reflect it.

https://fedorahosted.org/freeipa/ticket/3440
https://fedorahosted.org/freeipa/ticket/3450

Add Kerberos ticket flags management to service and host plugins.

2013-03-29T15:34:46+00:00

https://fedorahosted.org/freeipa/ticket/3329

Put pid-file to named.conf

2013-03-29T07:59:45+00:00

Fedora 19 has splitted /var/run and /run directories while in Fedora
18 it used to be a symlink. Thus, named may expect its PID file to be
in other direct than it really is and fail to start.

Add pid-file configuration option to named.conf both for new
installations and for upgraded machines.